Application Security Engineer (Pentester)

CryptoCom • Full-time • Shenzhen, China • 1m ago

Responsibilities

Discover security vulnerabilities through design review, source code review and penetration testing, either manually or by using automated tools, and follow up on the remediation process
Participant in relevant agile scrum meetings and provide professional recommendations on the design of security controls, libraries, and/or protocols
Conduct security-related training sessions
Implement various security control verification and risk detection through automated scripts
Provide support on application-level security monitoring, intrusion detection, and incident response

Requirements

OSCP (or equivalent, such as CREST) is a MUST.
A deep understanding of OWASP Top 10 and the ability to detect and address logic flaws are highly desirable.
Minimum four years of experience in Web API testing and proficiency in using BurpSuite is preferred.
Experience with Mobile App testing, comprehension of jailbreaking/rooting a device, API hooking, reverse engineering, and de-obfuscation is highly beneficial
Fluency in spoken and written English is essential, and proficiency in Mandarin would be advantageous.

Related Jobs

Senior Software Engineer, Web (Full Stack)

Bitmex • Full-time • Hong Kong • 1w ago

Engineering And Tech TypeScript React API

1w ago

Trading Ops & Risk Systems Engineer (AI & Automation)

CryptoCom • Full-time • Hong Kong, Hong Kong SAR • 2w ago

Engineering And Tech Python SQL API

2w ago

Senior Staff Engineer, AI Platform

OKX • Full-time • Hong Kong, Hong Kong SAR • 2w ago

Engineering And Tech Python Java API microservices Kafka

2w ago

Senior Quality Assurance Automation Engineer - Blockchain Team

CryptoCom • Full-time • Shenzhen, China • 2w ago

Engineering And Tech Python Selenium Java JavaScript API go Rust Linux Appium

2w ago

Senior Quality Assurance Engineer (Crypto.com APP/Fiat)

CryptoCom • Full-time • Shenzhen, China • 2w ago

Engineering And Tech Python Selenium Java API Appium

2w ago

Senior Quality Assurance Automation Engineer - Blockchain Team

CryptoCom • Full-time • Hong Kong, Hong Kong SAR • 2w ago

Engineering And Tech Python Selenium Java JavaScript API go Rust Linux Appium

2w ago

Principal/Senior Engineer - Blockchain Analysis Engineer (Java)

OKX • Full-time • Hong Kong, Hong Kong SAR • 3w ago

Engineering And Tech Java EVM API MySQL Redis Kafka gRPC

3w ago

Senior Quality Assurance Engineer (Crypto.com APP/Fiat)

CryptoCom • Full-time • Hong Kong, Hong Kong SAR • 3w ago

Engineering And Tech Python Selenium Java API Appium

3w ago

Senior Quality Assurance Engineer (Crypto.com APP/Equity)

CryptoCom • Full-time • Shenzhen, China • 3w ago

Engineering And Tech Python Selenium Java API Appium

3w ago

Senior Security Architecture & Governance Engineer

OKX • Full-time • Hong Kong, Hong Kong SAR • 3w ago

Engineering And Tech API microservices

3w ago